4 matches found
CVE-2008-5376
editcomment in crip 3.7 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/.tag.tmp temporary file...
6.9CVSS6AI score0.00339EPSS
SaveExploits0References1
CVE-2008-5376
editcomment in crip 3.7 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/.tag.tmp temporary file...
6.5AI score0.00339EPSS
SaveExploits0References2
CVE-2008-5376
In Crip 3.7, an local-privilege vulnerability exists: editcomment allows local users to overwrite arbitrary files through a symlink attack on a /tmp/*.tag.tmp temporary file. Root cause is improper handling of temp file creation/overwrite, enabling a symlink to redirect writes. The CVE entry note...
6.9CVSS6.2AI score0.00339EPSS
SaveExploits0References2Affected Software1
20